Bug Fixes

• ci: keep the MR job cache under the runner helper storage limit (a7949bf)
• installer: act for customers only as a verified member of the installer org (bfe5493)
• roles: keep platform-only permissions out of customer tenants' role templates (e842f6b)
• tenants: a tenant admin cannot re-link its tenant to another org or login realm (88eb7b7)
• users: only the platform links a user to a FusionAuth user (7a0d44d)

Features

• amqp: stamp every tenant.events publish with tenant-api's broker user (547ef60)
• authz: catalogue OCPP_SECURITY_READ/WRITE and FACTORY_QA_WRITE (8772354)
• installer: give installer-created customers their own tenant behind a flag (482ad21)
• migration: add dry-run customer tenant migration tool (968936a)
• tenants: grant OCPP security event scopes to new tenants' role templates (587e992)